asus ac88-U how to block web browsing access to specific LAN device

Basically I'm trying to only block web browsing on a single LAN wired device. So anytime someone pulls up a web browser and types in a standard port 80 website like www.google.com or facebook.com or whatever, they won't be able to access it.

Any ideas? Trying the network services filter, and it's not working for me to block port 80. Let's say I wanted to block port 80 web access on IP address 192.168.2.1 How would I go about setting that up in network services filter?